#adcs

Analysis · May 20, 2026 · Colten Anderson

PetitPotam: make a domain controller authenticate to you, relay it, own the domain

CVE-2021-36942 lets an attacker coerce a Windows machine, including a domain controller, into authenticating to them. Relay that to Active Directory Certificate Services and you can mint a certificate as the DC. It's an Active Directory configuration problem as much as a patch.